G1ANT FUNDS SP. Z O. O. with its seat in Warszawa ul. Zygmunta Słomińskiego 15 / 506A, 00-195 Warszawa, NIP: 675 170 2384, is a consulting and technology company in the field of digitized support for the HR industry, specializing in connecting professionals looking for new job offers and employers who are looking for professionals to cooperate.
The Policy defines the rules for the processing of personal data by the Administrator - as defined in art. 4 pts 1) GDPR, personal data is information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including name and surname, device IP, mail address electronic, location data, and information collected through cookies or other similar technology.
All actions of the Administrator are subject to the provisions of law in force in the field of personal data protection, in particular the Act on the Protection of Personal Data of May 10, 2018, as well as at the level corresponding to the standards specified in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC ("GDPR").
Personal data on the Website
Each User visiting our Website may share their data in two ways: automatically by connecting to the Website and actively by performing specific activities on the Website or using the Website. The administrator is the administrator of the above-mentioned data within the meaning of the GDPR.
In addition, the Administrator also processes the data of customers who entrusted their data for processing to the Administrator and cooperate with the Administrator on the basis of relevant agreements (hereinafter: "Customers"). Our Clients are employers who are administrators of all data processed by the Website on their behalf, in particular the data of candidates for work / cooperation who, using the Website, provided their personal data to our Clients. The administrator acts in this relationship as a processor, which means that he processes the personal data of customers only at their request and to the extent indicated by them.
If the User clicks on the links posted on the Website, he may be redirected to websites that are administered or constitute a service provided by the independent entities. In such situations, the processing of Personal Data takes place in accordance with the principles set out by these entities as part of external websites or services. Administrator is not responsible for their actions.
Data collected automatically by the Website
Automatically collected data is information automatically saved by the Website during the User's visit and these are: anonymous information on the number of time and time of the User's visit, IP address, URL address, browser type, device data, browser language, number of visits, type of operating system. Such data is analyzed for statistical or marketing purposes, using tools such as Google Analytics, which operate on the basis of the so-called “cookies”. These are tools belonging to third parties for which the Administrator is not responsible, therefore it is recommended to read the rules of their operation, available on websites belonging to the providers of these tools. Google's policy can be found at https://www.google.com/intl/pl/policies/privacy/. The data processed in the above-mentioned manner is stored only for the purpose of supporting the administration of the Website, enabling its efficient functioning and the use of user-friendly solutions. Without their presence, the Website may not work as expected by the User or it is not possible to adjust the content to the User's needs.
The legal basis for the processing of the data indicated above is Article 6 (1) lit. f) GDPR. Our legitimate interest results from the above-mentioned purposes of data processing, in particular to ensure that the Website Users operate efficiently and meet their expectations. If the presentation on the Website serves the purpose of preparing a contract, the legal basis for the processing is Article 6 para. 1 lit. b) GDPR.
Data collected by the Website through the User's activity
registration on the website as part of the Customer's account:
Upon registration of the Customer's account, an agreement for the provision of Website services is concluded with the Administrator.
Providing your personal data by the Customer is voluntary, but without them, it would not be possible to register your account on the Website.
The data that is required to provide is the company name and e-mail address, which are then secured with a password set by the customer. It may happen that these data will be personal data, hence they have been indicated in this section.
The above data will also be used so that the Administrator can communicate with the Customer regarding the use of the account, changes in the operation of the account, updates of settings, changes to the Regulations or other information regarding the performance of the contract.
You can view and change your personal data stored on the Customer's account at any time, except for the e-mail address provided during registration - changing the e-mail address requires changing the account or contacting the Administrator. To set up an account, in addition to the data collected during the registering, you must choose your password. The legal basis is Art. 6 sec. 1 letter b) of the GDPR, which means that you provide us with data for the purpose of performing the contract.
In addition, as part of the account management services, the customer has the option of creating a profile of his company in the "Company profile" tab, where he can voluntarily provide various data and graphics or photos about the company, at his own discretion. All data is processed by the Administrator as part of the implementation of the above-mentioned contract and according to the data processing agreement (in Regulation of the Website). The administrator does not check the truthfulness or correctness of the data contained in the "Company profile" or in the Customer's profile, the Customer is solely responsible for the content.
contact by e-mail email@example.com
At the time of contact to the e-mail address provided, the Administrator obtains the possibility of processing personal data on the basis of the legitimate interest of the administrator (Article 6 (1) (f) of the GDPR), which is the preparation of an answer to the question asked and correspondence with you regarding the clarification of your doubts.
Providing your personal data is voluntary, but without it, it would not be possible to correspond with you.
performance of contracts
The subject of the Administrator's activity is, inter alia, offering services that can be ordered remotely, outside the Administrator's office. Therefore, we process the data necessary to conclude and perform the contract. These include in particular:
As part of the contract, we may contact you at the address provided, including e-mail, to inform you about any changes of the Regulations, new Website functions, new settings, etc., to ensure the proper performance of the contract.
The legal basis for the aforementioned processing is Article 6 (1) lit. b) GDPR (additionally, it may be in connection with giving a consent to a specific communication channel, which means that the User provides us with data in order to conclude and perform the contract.
data processing for advertising purposes, including cookies
Cookie files (so-called "cookies") are IT data, which are stored on the Website user's end device and are intended for the use of the Website. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number.
It is the User who decides whether or not to consent to the installation of all cookies on his device. During the first visit to the Website, there are checkboxes available in which you can consent to cookies. Such consent is not implicit and automatic, but requires active and conscious action. However, some cookies are necessary for the Website to function properly. You can manage cookies at any time.
If the User agrees to the processing of data on the device from which he connects, using cookies or other similar technology, and accessing it, the Administrator has the right to process the User's personal data, including data on activity on the website (m. which areas of the website are visited, which links you use, etc.) for advertising, marketing purposes, personalising settings or understanding the browsing on the website in order to adapt the content. This allows for a better adjustment of the displayed content to the individual needs and preferences of Users. The way of using the data depends on the content of the marketing consent with the consent of the User.
The basis for the processing of your personal data is the necessity of processing to implement our legitimate interest, which is the ability to adapt the content of the website to the needs of Users (Article 6 (1) (f) of the GDPR) or consent to broader marketing, analytical and other activities (Article 6 paragraph 1 (a) of the GDPR).
The consent may be withdrawn by the User at any time. Withdrawal of consent will have effect for the future, from the date of submitting the relevant request, which means that it will not affect the lawfulness of any actions on personal data taken by the Administrator before its withdrawal. The user also has the right to object at any time to the processing of personal data processed for direct marketing purposes based on the legitimate interest of the Administrator. To withdraw consent or to object, it is sufficient, for example, to send an e-mail to the address provided in the point at the end of the Policy.
If Users want to receive information about the offered positions, including positions according to the keyword selected by the User, it is enough to indicate in the search engine the keyword according to which the job offers are to be searched and provide their e-mail address. In addition, simply providing your e-mail address will allow you to receive any information about new job offers. To send Job Alert, we need the User to provide an e-mail address and select the appropriate checkboxes.
The legal basis for this processing of personal data pursuant to Art. 6 sec. 1 lit. a) GDPR is your consent. The resignation from receiving Job Alert will be treated as the withdrawal of consent to the processing of personal data in this regard. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
We may process the data to assert our claims or to defend ourselves against the claims of the other party. The legal basis for data processing is the necessity of processing to implement the legitimate interest of the administrator (Article 6 (1) (f) of the GDPR); the Administrator's legitimate interest is protection against claims related to the use of the Website.
fulfilment of obligations resulting from legal provisions
The Administrator processes Users' personal data in order to fulfill statutory obligations, e.g. guidelines of supervisory authorities and storage obligations resulting from commercial and tax law. The legal basis for the processing of data in this case is the relevant provisions laid down by law in the connection with Art. 6 sec. 1 lit. c) GDPR.
Data processed on behalf of Clients
We process personal data on behalf of Clients in accordance with their instructions resulting from concluded contracts, on the basis of data entrustment agreements for data processing. They include the provision of presentation services for job offers and enabling an unlimited number of potential interested parties to familiarise them and sending Client via the Website data of potential candidates for work, to the extent indicated by the Clients. The data is processed by the Administrator only to ensure the functioning of the Website in accordance with the Client's guidelines.
We process personal data on behalf of the Clients, in particular to:
Transferring personal data to other entities
The Administrator's service providers process Users' data on behalf of the Administrator as processors and in each case are carefully selected and are required to sign a contract in accordance with art. 28 of GDPR.
Personal data processed on the Website may be transferred by the Administrator:
Users' data may also be transferred by the Administrator to entities providing technical and IT services (e.g. hosting, maintenance and service of IT systems, website) from outside the European Economic Area - in particular to the United States of America. These entities guarantee data security and are party to, inter alia, binding corporate rules pursuant to Art. 47 GDPR, standard data protection clauses adopted by the Commission, or an approved code of conduct with binding and enforceable obligations of the controller or processor in the third country to apply appropriate safeguards, including with regard to the rights of data subjects. In other cases, it is not expected that personal data will be transferred outside the European Economic Area.
The rights of Users in the field of personal data processing
You have the rights guaranteed by the GDPR regulation, and the scope of exercising of them by the Administrator depend on the individual case.
Providing data by the User is voluntary, however, failure to provide it may prevent contact with the Administrator, receiving Job Alert or using the services offered by the Administrator via the website.
You have the option of withdrawing any given consent at any time by sending a request in this regard to the address firstname.lastname@example.org. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
Moreover, each User has the right to:
The above rights may be implemented by contacting the User by post or by e-mail to the following e-mail address: email@example.com. If the rights are being exercised by User, the Administrator may ask the User for information or evidence that will confirm that the User is the person he / she claims to be.
The User also has the right to object to all processing purposes described in this Policy, for which the processing takes place on the basis of Article 6 (1) (f) of the GDPR.
If the User considers that the processing of his personal data by the Administrator violates the provisions of the GDPR, he has the right to lodge a complaint with the supervisory body - the President of the Office for Personal Data Protection.
Personal data retention period
We will process Users' personal data:
The website is not intended for persons under the age of 16
The website is not intended for people under the age of 16 and therefore the Administrator does not collect or store information about people who are known to be minors.
Operating in a private cloud
The User's data will be processed in a private cloud. Cloud servers are located in the European Economic Area (EEA), and the operator is based in the EEA, which guarantees the implementation of personal data protection in accordance with the GDPR.
During the visit to the Website, the browser creates a direct connection with the portal servers, however, the Administrator is has no impact on the amount of data that these portals download using such plugins.
By installing the browser plug-in, the user can limit or disable the transmission of data collected by cookies to Google. The appropriate plug-in can be downloaded and installed by the User at the following link: https://tools.google.com/dlpage/gaoptout?hl=pl. Other information on data processing by Google is available at: https://support.google.com/analytics/answer/6004245?hl=pl
The Website uses social plugins of the facebook.com network, operated by Facebook Inc. based in the USA, 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). The Facebook plugins can be recognized, for example, by a distinctive logo (white "f" in a blue field or a white thumb pointing upwards on a blue background).
Detailed information in this regard can be obtained at: http://www.facebook.com/help/?faq=17512. It is possible to block Facebook social plugins in the browser using appropriate blockers (eg "Facebook Blocker").
The Website uses social plugins of the Instagram portal operated by Instagram LLC, 1601WillowRoad, MenloPark, CA 94025, USA (hereinafter "Instagram"). The plugins are marked with the Instagram logo in the form of an "Instagram camera". Detailed information in this regard can be obtained at: https://help.instagram.com/155833707900388/. It is possible to block Instagram social plugins in your browser by using appropriate blockers (eg "Instagram Blocker").
The Website uses social plugins of the LinkedIn operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA („LinkedIn”). You can find an overview of the LinkedIn plugins and their appearance at: https://developer.linkedin.com/plugins. Information on LinkedIn's data protection can be found at: https://www.linkedin.com/legal/privacy-policy.
The Website uses Twitter plugins operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). You can find an overview of the Twitter plugins and their appearance at: https://twitter.com/about/resources/buttons; Information on Twitter's data protection can be found at: https://twitter.com/privacy.
By installing a browser plug-in, the user can limit or disable the transmission of data collected by cookies to HotJar. The appropriate plug-in can be downloaded and installed by, for example, the following link: https://www.hotjar.com/policies/do-not-track. Other information on data processing by HotJar is available at: https://www.hotjar.com/privacy.
The Website uses two types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the web browser. "Permanent" cookies are stored on the User's end device for the time specified in their parameters, i.e. that they may remain on the User's device for various periods of time - it may be the duration of the session, or a set time or until they are deleted by the User.
The website uses the following cookies:
|Cookie name/td>||Provider||Stored time|
|CognitoIdentityId-eu-west-1:4e2e4b63-0e66-4fa9-8bcb-80d2a9134d46||Amazon Web Services||persistent|
Pursuant to the Act of 16 July 2004 Telecommunications Law (Journal of Laws No. 171, item 1800, as amended), the User has the right to decide on the access of cookies to his computer by selecting them in his browser.
To learn how to manage cookies in popular browsers, we recommend that you read the information about individual web browsers:
Changes to the Policy
Zmiany w Polityce będą dokonywane w celu podwyższenia standardów ochrony polityki prywatności lub dostosowania jej do wymogów prawa lub podwyższenia standardów usług Serwisu. Użytkownik zostanie poinformowany o zmianie informacji przesłanej na adres e-mail.
In the event of discrepancies, the Polish version of the Policy applies.
Contact with the Administrator
If you have any queries regarding the Policy or the rules regarding the processing of personal data, feel free to contact Administrator on: firstname.lastname@example.org.